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Amendment to the Claims : 

This listing of claims will replace all prior versions, and listings, of claims in 
the application: 

Listing of Claims : 

1. (canceled) 

2. (currently amended): A smart card, comprising: 

a communication unit to communicate with the outside: 
an information accumulating unit to accumulate data and a program: and 
an arithmetic processing unit to perform information processing, 
wherein said information accumulating unit stores value data, a transfer 

key that encrypts the value data, a transfer key identifier that verifies whether the 

transfer kev is newer or older in accordance with a value of the transfer key 

identifier, an update kev that encrypts the transfer kev. and an upper limit of the 

transfer kev identifier that represents an upper limit of the transfer kev identifier that 

can be stored bv the smart card, 

wherein said arithmetic processing unit updates the transfer kev identifier 

and the transfer kev bv performing encryption using the update kev on the basis of 

common-kev cryptography, 

wherein said arithmetic processing unit updates the value data bv 

performing encryption using the transfer kev on the basis of the common-kev 

cryptographv, A smart card accord i ng to claim 1 , 

wherein if command data that requests transmission of card information 

is received, said arithmetic processing unit transmits the said transfer key identifier 
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to the outside as response data, 

wherein if command data that requests update permission of the said 

transfer key is received, said arithmetic processing unit generates a first random 

number and transmitting the said first random number to the outside as response 

data, 

wherein if the command data which requests to obtain the said transfer 
key, and which stores a second random number, is received, said arithmetic 
processing unit transmits first encrypted data, into which the second random 
number, the said transfer key identifier, and the said transfer key are encrypted by 
use of the said update key on the basis of common-key cryptography, to the outside 
as response data, and 

wherein if command data which requests update of the said transfer 
key, and which stores second encrypted data, is received, said arithmetic processing 
unit decrypts the said second encrypted data by use of the said update key on the 
basis of common-key cryptography to extract first data, second data, and third data, 
and if the said first data is equivalent to the said first random number, and if a value 
of the said second data is between a value of the said upper limit of transfer key 
identifier and a value of the said transfer kev identifier , updates changes a value of 
the said transfer key identifier to a value of the said second data, and updates 
changes a value of the said transfer key to a value of the said third data. 

3. (canceled). 

4. (currently amended): A smart card, comprising: 

a communication unit to communicate with the outside: 
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an information accumulating unit to accumulate data and a program; and 
an arithmetic processing unit to perform information processing, 
wherein said information accumulating unit stores value data, a transfer 
kev that encrypts the value data, a transfer kev identifier that verifies whether the 
transfer key is newer or older in accordance with a value of the transfer key 
identifier, a first public kev certificate including a first public kev, which encrypts the 
transfer kev, a secret kev corresponding to the first public kev, and an upper limit of 
transfer kev identifier that represents an upper limit of the transfer kev identifier 
which can be stored bv the smart card, 

wherein said arithmetic processing unit updates the transfer kev identifier 
and the transfer kev bv performing encryption using the first public kev certificate 
and the secret kev on the basis of public-kev cryptography, 

wherein said arithmetic processing unit updates the value data bv 
performing encryption using the transfer kev on the basis of common-key 
crvptooraphv, A smart card according to claim 3, 

wherein if command data that requests transmission of card information is 
received, said arithmetic processing unit transmits to e said transfer key identifier and 
ibe said first public key certificate to the outside as response data, 

wherein if command data which requests update permission of toe said 
transfer key, and which stores a second public key certificate including a second 
public key, is received, said arithmetic processing unit generates a first random 
number and transmitting toe said first random number to the outside as response 
data, 

wherein if command data which requests to obtain toe said transfer key, 
and which stores a second random number and a third public key certificate 
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including a third public key, is received, said arithmetic processing unit first creates 
first encrypted data into which toe said transfer key identifier and the said transfer 
key are encrypted by use of foe said third public key on the basis of public-key 
cryptography, next creates first digital signature data from the said first encrypted 
data and the said second random number by use of foe said secret key on the basis 
of public-key cryptography, and lastly transmits foe said first encrypted data and foe 
said first digital signature data to the outside as response data, and 

wherein if command data which requests update of foe said transfer key, 
and which stores second encrypted data and second digital signature data, is 
received, said arithmetic processing unit first checks foe said second digital 
signature data by use of foe said second public key on the basis of public-key 
cryptography, next decrypts the second encrypted data by use of foe said secret key 
on the basis of public-key cryptography to extract first data and second data, and 
lastly if a value of the first data is between a value of foe said upper limit of transfer 
key identifier and a value of foe said transfer kev identifier , epdates changes a value 
of foe said transfer key identifier to a value of foe said first data, and updates a value 
of foe said transfer key to a value of foe said second data. 

5. (canceled) 

6. (currently amended): A smart ca rd, comprising: 

a communication unit to communicate with the outside; 
an information accumulating unit to accumulate data and a program; and 
an arithmetic processing unit to perform information processing, 
wherein said information accumulating unit stores value data, a transfer 
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key that encrypts the value data, a transfer kev identifier that verifies whether the 
transfer key is newer or older in accordance with a value of the transfer key 
identifier, an update kev that updates the transfer kev. an update kev identifier that 
verifies whether the update kev is newer or older in accordance with a value of the 
update kev identifier, a first public kev certificate including a first public kev. which u 
encrypts the transfer kev, a secret kev corresponding to the first public kev, and an 
upper limit of transfer kev identifier that represents an upper limit of the transfer kev 
identifier which can be stored bv the smart card, 

wherein said arithmetic processing unit updates the tra nsfer kev bv use of 
the update kev on the basis of common-kev cryptography, o r updates the transfer 
kev bv use of the first public kev certificate and the sec ret kev on the basis of 
common-key cryptography, 

wherein said arithmetic processing unit updates the value data bv 
performing encryption using the transfer kev on the b asis of the common-kev 
cryptography ^ smart card accord i ng to cla i m 5, 

wherein if command data that requests transmission of card information is 
received, said arithmetic processing unit transmits the said transfer key identifier, the 
said update key identifier, and the said first public key certificate to the outside as 
response data, 

wherein if command data that requests update permission of the said 
transfer key is received, said arithmetic processing unit generates a first random 
number and transmits the said first random number to the outside as response data, 

wherein if the command data which requests to obtain the said transfer 
key, and which stores a second random number, is received, said arithmetic 
processing unit transmits first encrypted data, into which the said second random 
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number, the said transfer key identifier, and the said transfer key are encrypted by 
use of the said update key on the said basis of common-key cryptography, to 
outside as response data, and 

wherein if command data which requests update of the said transfer key, 
and which stores second encrypted data, is received, said arithmetic processing unit 
first decrypts the said second encrypted data by use of the said update key on the 
said basis of common-key cryptography to extract first data, second data, and third 
data, and next if the first data is equivalent to the first random number, and if a value 
of the second data is between a value of the upper limit of transfer key identifier and 
a value of the transfer kev identifier , updates changes a value of the transfer key 
identifier to a value of the second data, and updat e s changes a value of the transfer 
key to a value of the third data. 

7. (currently amended): A smart card, comprising: 
a communication unit to communicate with the outside: 
an information accumulating unit to accumulate data and a p rogram: and 
an arithmetic processing unit to perform information processing, 
wherein said information accumulating unit stores value data, a transfer 
kev that encrypts the value data, a transfer kev identifi er that verifies whether the 
transfer kev is newer or older in accordance with a value of th e transfer kev 
identifier, an update kev that updates the transfer kev. an updat e kev identifier that 
verifies whether the update kev is newer or older in accordance with a v alue of the 
update kev identifier, a first public kev certificate including a first p ublic kev. which u 
encrypts the transfer kev. a secret kev corresponding to the first public kev. and an 
upper limit of transfer kev identifier that represents an upper limit of the transfer kev 



7 



U. S. Patent Application No. 10/602,696 
Response to OA mailed August 10, 2007 



Attorney Docket: 501 .42780X00 



identifier which can be stored bv the smart card. 

wherein said arithmetic processing unit updates the transfer key by use of 
the update key on the basis of common-kev cryptography, or updates the transfer 
key bv use of the first public key certificate and the secret kev on the basis of 
common-kev cryptography, 

wherein said arithmetic processing unit updates the value data bv 
performing encryption using the transfer kev on the basis of the common-kev 
cryptooraphv, A smart card according to claim 5, 

wherein if command data that requests transmission of card information is 
received, said arithmetic processing unit transmits foe said transfer key identifier, foe 
said update key identifier, and foe said first public key certificate to the outside as 
response data, 

wherein if command data which requests update permission of foe said 
transfer key, and which stores a second public key certificate including a second 
public key, is received, said arithmetic processing unit generates a first random 
number and transmitting foe said first random number to the outside as response 
data, 

wherein if command data which requests to obtain foe said transfer key, 
and which stores a second random number and a third public key certificate 
including a third public key, is received, said arithmetic processing unit first creates 
first encrypted data into which foe said transfer key identifier and foe said transfer 
key are encrypted by use of foe said third public key on the basis of public-key 
cryptography, next creates first digital signature data from foe said first encrypted 
data and the second random number by use of the secret key on the basis of public- 
key cryptography, and lastly transmits foe said first encrypted data and the first 
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digital signature data to outside as response data, and 

wherein if command data which requests update of the said transfer key, 
and which stores second encrypted data and second digital signature data, is 
received, said arithmetic processing unit first chocks verifies the second digital 
signature data by use of the said second public key on the basis of public-key 
cryptography, next decrypts the said second encrypted data by use of the said 
secret key on the basis of public-key cryptography to extract first data and second 
data, and lastly if a value of the first data is between a value of the upper limit of 
transfer key identifier and a value of the said transfer kev identifier , updates changes 
a value of the said transfer key identifier to a value of the first data, and updates 
changes a value of the said transfer key to a value of the second data. 

8. (canceled) 

9. (currently amended): A smart card, comprising: 

a communication unit to communicate with the outside; 
an information accumulating unit to accumulate data and a program; and 
an arithmetic processing unit to perform information processing, 
wherein said information accumulating unit stores value data, two or more 
transfer kevs that encrypts the value data, a transfer kev identif ier that includes a 
selection transfer kev identifier that identifies the transfer kev cu rrently selected, and 
that identifies said two or more transfer kevs. and an update kev used to update the 
transfer kev, 

wherein if the value of the transfer kev identifier, which is received by said 
communication unit, is newer than that of said selection transfer kev identifier, and 
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which is equivalent to either a value of said transfer key identifier stored bv said 
information accumulating unit, said arithmetic processing unit updates said selection 
transfer key identifier to the transfer key identifier received bv said communication 
unit bv performing encryption using the update key on the basis of common-key 
cryptography, 

wherein said arithmetic processing unit updates the value data bv 
performing encryption using the transfer key corresponding to the update transfer 
key identifier on the basis of common-key cryptography, A smart card accord i ng to 
c l a i m 8, 

wherein if command data that requests transmission of card information is 
received, said arithmetic processing unit transmits said selection transfer key 
identifier to the outside as response data, 

wherein if command data that requests update permission of the transfer 
key is received, said arithmetic processing unit generates a first random number and 
transmitting the first random number to the outside as response data, 

wherein if the command data which requests to obtain the transfer key, 
and which stores a second random number, is received, said arithmetic processing 
unit transmits first encrypted data, into which said second random number, said 
selection transfer key identifier are encrypted by use of said update key on the basis 
of common-key cryptography, to the outside as response data, and 

wherein if command data which requests update of the transfer key, and 
which stores second encrypted data, is received, said arithmetic processing unit 
decrypts the second encrypted data by use of the update key on the basis of 
common-key cryptography to extract first data, second data, and if the first data is 
equivalent to the first random number, and if a value of the second data which is 
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equivalent to one of values of said transfer key identifiers, and which is newer than 
that of said selection transfer key identifier used to identify said transfer key currently 
selected, updat e s changes a value of said selection transfer key identifier to a value 
of the second data. 

10.-19. (canceled) 
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